2b219c671c25f9b255bc1c8fb6e7a559_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b219c671c25f9b255bc1c8fb6e7a559_JaffaCakes118
Size

1.9MB
MD5

2b219c671c25f9b255bc1c8fb6e7a559
SHA1

a68e357f55fe02df8b9b1b37bb66c293f7fb535e
SHA256

754381377abbad2b56a52a24f6eaad0cda195fc9d6ca6ad1235983f2af5f7008
SHA512

1b71b74b476f31baf0671879b733157f2f6f05db75af0a7ee88e0a6c7281de7d633dc4e9f84186bdb3cb3861d5adc567d7874a2130c65401c471f9818263dea0
SSDEEP

49152:rzvcqUs4hm65pPdP84YDcYcF6ttexsVGO2spE0iJ/Fxulr7GsE:Uoup1k53ttuskO2sK0iJ/Fxud8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b219c671c25f9b255bc1c8fb6e7a559_JaffaCakes118

Files

2b219c671c25f9b255bc1c8fb6e7a559_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 1.7MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 122.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LibHook
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 75KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE